Vendor/product archive

huawei / ecns280_firmware CVEs

Beta · best-effort

3 CVEs tagged to huawei / ecns280_firmware — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to huawei vendor archive

CVE-2021-22338

Published Jun 29, 2021

There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input XML message. Attacker can send specific…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-22361

Published Jun 22, 2021

There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is not authorized correct…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2021-22292

Published Feb 6, 2021

There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specifi…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1